/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 7695 by nion, Sat Dec 22 16:01:32 2007 UTC revision 11552 by jmm-guest, Fri Apr 3 19:42:47 2009 UTC
# Line 1  Line 1 
1  Embedded code copies  Embedded code copies
2  ====================  ====================
3    
4  This file collects cases, where a source package embeds code from  This file collects source packages that embed code from other projects.
5  other projects which is considered bad for fixing security flaws  This is considered bad for fixing security flaws because the fix needs
6  because the fix needs to be applied in multiple source packages.  to be applied in multiple source packages.
7    
8  Format:  Format:
9  <srcpkg> (<optional comment about srcpkg>)  <srcpkg> (<optional comment about srcpkg>)
10          - <embedding srcpkg> <status> (<sort>; bug #<number>)          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11          NOTE: optional comments about the linkage of the embedding srcpkg          NOTE: optional comments about the linkage of the embedding srcpkg
12    
13  xpdf code: (some use xpdf 2, some xpdf 3)  status: version number fixing the embedded copy, <unfixed>, <removed>,
14  gpdf (has been replaced by evince - which uses poppler - in Etch)          <itp> or <unknown> if the version number can not be determined
15  pdftohtml (has been replaced by poppler-utils from the poppler source package, still in Etch, though)          <unfixable> for unavoidable cases (e.g., forks that add real value)
16  kdegraphics/kpdf (okular, the kpdf replacement in KDE 4 is using poppler, #436164)  sort: static (linking statically against a lib)
17  tetex-bin (links to poppler since 3.0-12)        embed (embedding a copy of the library into another source package)
18  texlive-bin (links to poppler)        fork (the package is not just embedding code but it is a fork and
19  cupsys (uses xpdf-utils, it's still present in the src, though)              thus might share parts of the source code)
20  poppler        old-version (the package is an older version of essentially
21  koffice/kword (upstream is working on using poppler, #436163)                     the same code)
22  libextractor (uses internal pdf decoder since 0.5.12-1)  
23  pdfkit.framework (links to poppler since 0.8-4)  The srcpkg might be some string to identify the code if there is no
24  ipe (only small parts, but with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp)  specific source package.
25  ruby-gnome2 (has a copy of poppler but links against the shared lib)  
26    Everything up to the next line is ignored.
27  silc-toolkit:  ---BEGIN
28  silc-client (uses libsilc and libsilcclient)  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29            NOTE: Fixed packages link to poppler library unless otherwise noted
30  dietlibc:          - gpdf <removed>
31  ccontrol (links statically)          [sarge] - gpdf <unfixed>
32            NOTE: has been replaced by evince in etch
33  libiax:          - pdftohtml <unknown>
34  iaxmodem          [sarge] - pdftohtml <unfixed>
35            [etch] - pdftohtml <unfixed>
36  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)          NOTE: has been replaced by poppler-utils
37  dpkg          - kdegraphics <unfixed> (embed; bug #436164)
38  rsync (somehow derived code base)          NOTE: the kpdf replacement in KDE 4 is using poppler
39  mono          - texlive-base 3.0-12 (embed)
40  mozilla(?)          - texlive-bin 2007-1 (embed)
41  Linux kernels          NOTE: links to poppler
42  pvpgn (links dynamically since 1.7.8-2)          - koffice <unfixed> (embed; bug #436163)
43  mrtg (links dynamically since 2.12.2-1)          - libextractor 0.5.12-1 (embed)
44  rpm          NOTE: libextractor is using its own pdf decoder now
45            - libextractor 0.5.12-1 (embed)
46  libbz2:          - pdfkit.framework 0.8-4 (embed)
47  dpkg (statically linked)          - ipe <unfixed> (embed)
48            NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
49  libgadu/ekg:          - ruby-gnome2 <unknown> (embed)
50  centericq          NOTE: copy only present in source but links to poppler
51  gaim          - pdfedit <unfixed> (embed; bug #510794)
52  pigdin (links dynamically against libgadu)  
53  kopete (ships the code, but links dynamically in the Debian package)  ppmd
54  kadu (not packaged in Debian)          - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)
55  GNU gadu (not yet packaged in Debian)  
56    peercast
57  xmlrpc: (which package is the "origin" of this code?)          - gnome-peercast <unfixed> (embed)
58  drupal          NOTE: gnome-peercast may better be removed, see #466539
59  phpgroupware  
60  egroupware  silc-toolkit
61  phpwiki          - silc-client 1.1~beta6-1 (embed)
62  php4 (php-pear, IIRC this was reorganized some weeks ago?)  
63    icclib
64  shtool: (affects build-time only)          - ghostscript (embed)
65  mysql-ocaml          - argyll (embed)
66  php4  
67    dietlibc
68  mozilla:          - ccontrol 0.9.1+20071204-1 (static)
69  mozilla-firefox  
70  mozilla-thunderbird  libmikmod
71  firefox (to be removed)          - sdl-mixer1.2 <unfixed> (embed)
72  thunderbird (to be removed)          TODO: report bug
73  iceweasel  
74  iceape  libiax
75  icedove          - iaxmodem <unfixed> (embed)
76  xulrunner  
77  nvu (no longer in Debian)  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
78            - dpkg <unfixed> (embed)
79  xli:          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
80  xloadimage          - rsync <unfixed> (embed)
81            NOTE: somehow derived code base
82  lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)          - mono <unfixed> (embed)
83  openmotif          TODO: check mozilla
84  xfree86/xorg (in libxpm)          - Linux kernels <unfixed> (embed)
85            - pvpgn 1.7.8-2 (embed)
86  kerberized apps with BSD origin:          - mrtg 2.12.2-1 (embed)
87  krb4          - rpm <unknown> (embed)
88  krb5          NOTE: pinged anibal since when rpm was fixed
89  heimdal          - tuxcmd-modules <itp> (embed; bug #508082)
90    
91  grip: (which pkg is the origin?)  libbz2
92  libcdaudio          - dpkg <unfixed> (static)
93  grip  
94  gnome-vfs (vfs2 as well?)  libgadu:
95            - centericq <unfixed> (embed)
96  fudforum:          - gaim <unfixed> (embed)
97  phpgroupware-fudforum          - pidgin <unfixed> (embed)(links dynamically against libgadu) (that should be fixed, then???)
98  egroupware-fudforum (removed from egroupware after sarge)          - kopete 4:3.3.2-5 (embed)
99            - kadu 0.6.0.2-3 (embed)
100  cvs:          - gadu <unfixed> (embed)
101  gcvs (at least an additional script is included, check if there's more)          - ekg 1:1.8~rc0-1 (embed)
102            - kadu 0.6.0.2-3 (embed; bug #504430)
103  pcre:          NOTE: gadu not packaged in Debian yet
104  all pythons  
105  php4 (src included, but Debian package links dynamically)  xmlrpc (which package is the "origin" of this code?)
106  analog (src included, but Debian package links dynamically)          - drupal <unfixed> (embed)
107  libgoffice-1          - phpgroupware <unfixed> (embed)
108  vfu (removed linking against embedded copy in 4.06-4.1; #450754)          - egroupware <unfixed> (embed)
109  tf5 (since 5.0beta7 the Debian package links dynamically)          - phpwiki (embed)
110  monotone (including this starting from 0.37)          - php4 <unfixed> (embed)
111  glib (2.14 series for gregex support, only for udeb, regular packag links dynamic)          TODO: check, php-pear, IIRC this was reorganized some weeks ago?
112  apache2 (since 2.0.53-4 uses 040_link_external_pcre patch)  
113  exim4 (since 4.10-0.srh20.12 uses 36_pcre patch to use external pcre)  shtool (affects build-time only)
114  yacas (<= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway)          - mysql-ocaml <unfixed> (embed)
115  gtamsanalyzer.app (links dynamically since 0.42-5)          - php4 <unfixed> (embed)
116    
117  tiff:  mozilla source code
118  wxpythongtk (check, which debian pkg this is in)          - mozilla-firefox <unfixed> (embed)
119  older kdegraphics/kpdf releases < 3.3 embedded a copy          - mozilla-thunderbird
120            - firefox <removed>
121  uudeview:          [etch] - firefox <unfixed> (embed)
122  libconvert-uulib-perl          - thunderbird <removed>
123            [etch] - thunderbird <unfixed> (embed)
124  sqlite: (not affected by security vulnerabilities so far)          - iceweasel <unfixed> (embed)
125  amarok          - iceape <unfixed> (embed)
126  monotone          - icedove <unfixed> (embed)
127  iceweasel          - xulrunner <unfixed> (embed)
128            - nvu <removed> (embed)
129  util-linux/mount:  
130  loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb  xli
131            - xloadimage <unfixed> (embed)
132  webmin:  
133  usermin (only in sarge)  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
134            - openmotif <unfixed> (embed)
135  sylpheed:          - xfree86/xorg <unfixed> (embed)
136  sylpheed-claws          NOTE: in libxpm
137    
138  phpsysinfo:  kerberized apps with BSD origin
139  egroupware          - krb4 <unfixed> (embed)
140  phpgroupware          - krb5 <unfixed> (embed)
141            - heimdal <unfixed> (embed)
142  phpldapadmin:  
143  egroupware (removed from egroupware after sarge)  grip (which pkg is the origin?)
144            - libcdaudio
145  chmlib:          - grip
146  kchmviewer (ships the code but links dynamically)          - gnome-vfs
147            TODO: check vfs2 as well
148  libavcodec/libavformat (source: ffmpeg):  
149  mplayer (#395252)  fudforum
150  xvidcap          - phpgroupware-fudforum <unfixed> (embed)
151  kino (links statically, does not include code)          - egroupware-fudforum <removed>
152  vlc (links statically, does not include code)          [sarge] - egroupware-fudforum <unfixed> (embed)
153  smilutils (links statically, does not include code)  
154  motion (links statically, does not include code)  cvs
155  gst-ffmpeg          - gcvs <unfixed> (embed)
156  gstreamer0.10-ffmpeg          NOTE: see cvsunix/src in tarball
157  xmovie  
158    pcre
159            - python* <unfixed> (embed)
160            - php4 <unknown> (embed)
161            - analog 2:5.23-0woody1 (embed)
162            - libgoffice-1 <unfixed> (embed)
163            - vfu 4.06-4.1 (embed; bug #450754)
164            - tf5 5.0beta7-1 (embed)
165            - monotone <unfixed> (embed)
166            NOTE: this only affects versions >= 0.37
167            - glib2.0 2.15.2-1 (embed)
168            - apache2 2.0.53-4 (embed)
169            - exim4 4.10-0.srh20.12 (embed)
170            - yacas <unfixed> (embed)
171            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
172            - gtamsanalyzer.app 0.42-5 (embed)
173            - tin <unknown> (embed)
174            - kazehakase 0.5.2-1
175            - webkit <unfixed> (embed)
176            - qt4-x11 <unfixed> (embed)
177            NOTE: embedded via webkit copy
178    
179    tiff
180            - wxwindows2.4 2.2.1 (embed)
181    
182    uudeview
183            - libconvert-uulib-perl <unfixed> (embed)
184            - pan <unfixed> (embed)
185    
186    sqlite (not affected by security vulnerabilities so far)
187            - amarok <unfixed> (embed)
188            - monotone <unfixed> (embed)
189            - iceweasel <unfixed> (embed)
190    
191    util-linux/mount
192            - loop-aes-utils <unfixed> (embed)
193            NOTE: contains code from util-linux' mount in the mount-aes-udeb
194    
195    webmin
196            - usermin <unknown> (embed)
197            [sarge] - usermin <unfixed> (embed)
198    
199    sylpheed
200            - sylpheed-claws <unfixed> (fork)
201    
202    phpsysinfo
203            - egroupware <unfixed> (embed)
204            - phpgroupware <unfixed> (embed)
205    
206    phpldapadmin
207            [sarge] - egroupware <unfixed> (embed)
208            NOTE: removed from egroupware after sarge
209    
210    chmlib
211            - kchmviewer <unknown> (embed)
212    
213    libavcodec/libavformat (source: ffmpeg)
214            - mplayer 1.0~rc2-14 (embed; bug #395252)
215            - kino 1.0.0-1
216            - vlc <not-affected> (Links dynamically since initial release)
217            - smilutils 0.3.0-10
218            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
219            - motion 3.1.19-1
220            - gstreamer0.10-ffmpeg 0.10.3-2
221            - xmovie <unfixed>
222            TODO: gimp-gap (potentially using ffmpeg code as well)
223    
224    faad2
225            - mplayer 1.0~rc2-20 (embed)
226    
227    mad MPEG decoding lib
228            - mad <unfixed> (embed)
229            - xine-lib <unfixed> (embed)
230    
 mad MPEG decoding lib:  
 mad  
 xine-lib  
   
 libdts:  
231  libdts  libdts
232  xine-lib          - xine-lib <unfixed> (embed)
233    
 flac:  
234  flac  flac
235  xine-lib          - xine-lib <unfixed> (embed)
   
 liba52:  
 a52dec  
 xine-lib  
   
 libmpeg2:  
 mpeg2dec  
 xine-lib  
   
 curl:  
 wget (code for NTLM authentication)  
236    
237  TODO evaluate:  liba52
238  gimp-gap (potentially using ffmpeg code as well)          - a52dec <unfixed> (embed)
239            - xine-lib <unfixed> (embed)
240    
241  uw-imap:  libmpeg2
242  pine          - mpeg2dec <unfixed> (embed)
243  alpine          - xine-lib <unfixed> (embed)
244    
245  imagemagick:  curl
246  graphicsmagick          - wget <unfixed> (embed)
247            NOTE: code for NTLM authentication
248    
249  halibut:  uw-imap
250  nsis          - pine <unfixed> (embed)
251            - alpine <unfixed> (embed)
252    
253  libghttp:  imagemagick
254  hotway          - graphicsmagick <unfixed> (fork)
255    
256  libsndfile:  halibut
257  ardour          - nsis <unfixed> (fork)
258    
259  glibmm2.4:  libghttp
260  ardour          - hotway <unfixed> (embed)
261    
262  libgnomecanvasmm2.6:  libsndfile
263  ardour          - ardour 1:2.7.1-1 (embed)
264    
265  libsigc++-2.0:  glibmm2.4
266  ardour          - ardour 1:2.7.1-1 (embed)
267    
268  soundtouch:  libgnomecanvasmm2.6
269  ardour          - ardour 1:2.7.1-1 (embed)
270    
271  libmms:  libsigc++-2.0
272  xine-lib          - ardour 1:2.7.1-1 (embed)
 mimms  
   
 FCKeditor: (packaged as fckeditor)  
 knowledgeroot  
 moin (452599)  
 karrigell (452598)  
 gforge-plugins-extra (fixed since 4.6.99+svn6225-1)  
   
   
   
 Moodle contains lots of things:  
 AdoDB  
 AdoDB-XML Schema  
 ipatlas  
 PHPMailer  
 Smarty  
 htmlArea  
 TinyMCE  
 bennu  
   
 TinyMCE:  
 wordpress  
 moodle  
 knowledgeroot  
 joomla (ITP)  
   
 scintilla:  
 scite  
 qscintilla  
 qscintilla2  
 geany  
   
 libphp-adodb:  
 gallery2  
 phppgadmin  
 egroupware  
 phpwiki  
 ipplan  
 typo3  
 moodle  
 cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)  
273    
274  gzip:  soundtouch
275  linux-kernel (lib/inflate.c)          - ardour 1:2.7.1-1 (embed)
 klibc (based on linux-kernel gzip code)  
 busybox  
276    
277  neon:  libmms
278  cadaver (all, but being worked on: #188381)          - xine-lib <unfixed> (embed)
279  gnome-vfs2 (#395874)          - mimms <unfixed> (embed)
 litmus (#395875)  
 screem (sarge only)  
 sitecopy (#395876)  
 tla (etch/sid only: #395877)  
280    
281  libmodplug:  fckeditor
282  gst-plugins-bad0.10          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
283            - moin 1.8.2-2 (embed; bug #452599)
284            - karrigell <removed> (embed; bug #452598)
285            - gforge 4.6.99+svn6225-1 (embed)
286    
287  libvncserver:  ipatlas (not packaged in Debian)
288  vino          - moodle <unfixed> (embed; bug #507185)
289    
290  putty:  libphp-phpmailer
291  filezilla          - moodle <unfixed> (embed; bug #507185)
292            - mahara <unfixed> (embed)
293            - symfony <unfixed> (embed)
294            - phpgroupware-felamimail <unfixed> (embed)
295            NOTE: phpgroupware-felamimail is only in etch
296            - egroupware <unfixed> (embed; bug #504283)
297            - glpi <unfixed>
298    
299  tinyxml (not packaged in Debian):  htmlArea (not packaged in Debian)
300  filezilla          - moodle <unfixed> (embed)
301    
302  gv:  giflib:
303  evince (ps/ tree from gv 3.5.8)          - wine <unfixed> (embed; bug #466181)
 evince-gtk (not packaged in Debian)  
304    
305  libXbae:  bennu (not packaged in Debian, http://bennu.sourceforge.net)
306  libpawlib2-lesstif package (from Cernlib)          - moodle <unfixed> (embed)
307    
308  libXaw:  smarty:
309  libpawlib2-lesstif package (from Cernlib)          - moodle 1.8.2-2 (embed; bug #471158)
310            - gallery2 2.2.5-2 (embed; bug #471160)
311            - mahara 0.9.2-2 (embed; bug #471201)
312            - gosa 2.4beta1-1 (embed; bug #471200)
313    
314  (I plan to deal with the above two cases after Etch release. -- KevinMcCarty)  TinyMCE
315            - wordpress 2.5.1-3 (embed; bug #478257)
316  libgd2:          - moodle <unfixed> (embed; bug #507185)
317  graphviz (lib/gd seems to be 2.0.33)          - knowledgeroot <unfixed> (embed)
318            - joomla <itp> (bug #326398)
319  rar:  
320  unrar-nonfree  scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
321            - scite <unfixed> (embed)
322  unrar-free: (maybe this code is derived from the original rar, too?)          - qscintilla <unfixed> (embed)
323  clamav (seems to be disabled in default config)          - qscintilla2 <unfixed> (embed)
324            - geany <unfixed> (fork)
325  mplayer (DirectMedia Object loader):          - anjuta <unfixed> (embed)
326  xine-lib (src/libw32dll/)  
327  vlc (modules/codec/dmo/)  libphp-adodb
328            - moodle <unfixed> (embed; bug #507185)
329  libwpd (WordPerfect converter):          NOTE: also AdoDB-XML Schema
330  openoffice.org          - gallery2 <unfixed> (embed)
331            - phppgadmin <unfixed> (embed)
332  fsplib (http://sourceforge.net/projects/fsp/):          - egroupware <unfixed> (embed)
333  gftp (lib/fsplib version 0.3)          - phpwiki <unfixed> (embed)
334            - ipplan <unfixed> (embed)
335  librpcsecgss:          - typo3 <unfixed> (embed)
336  krb5          - cacti <unknown> (embed)
337            [sarge] - cacti <unfixed> (embed)
338  jasper:          NOTE: dependency exists, but internal version is used
339  ghostscript          - gforge 4.7~rc2-6 (embed)
340  gs-gpl          - mahara <unfixed> (embed)
341    
342  libidn:  gzip
343  monotone          - linux-kernel <unfixed> (embed)
344            NOTE: lib/inflate.c
345            - klibc <unfixed> (embed)
346            NOTE: based on linux-kernel gzip code
347            - busybox <unfixed> (embed)
348    
349    neon
350            - cadaver <unfixed> (embed; bug #188381)
351            - gnome-vfs2 <unfixed> (embed; bug #395874)
352            - litmus <unfixed> (embed; #395875)
353            [sarge] - screem <unfixed> (embed)
354            - sitecopy <unfixed> (embed; bug #395876)
355            [etch] - tla <unfixed> (embed; bug #395877)
356            [sarge] - tla <unfixed> (embed; bug #395877)
357    
358    libmodplug
359            - gst-plugins-bad0.10 <unfixed> (embed)
360    
361    libvncserver
362            - vino <unfixed> (embed)
363    
364    putty
365            - filezilla <unfixed> (embed)
366    
367    tinyxml (not packaged in Debian)
368            - filezilla <unfixed>
369    
370    gv
371            - evince <unfixed> (embed)
372            NOTE: ps/ tree from gv 3.5.8
373            - evince-gtk <unfixed> (embed)
374            NOTE: not packaged in Debian
375    
376    libXbae
377            [etch] - libpawlib2-lesstif <unfixed> (embed)
378            NOTE: from Cernlib
379    
380    libXaw
381            [etch] - libpawlib2-lesstif
382            NOTE: from Cernlib
383            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
384    
385    libgd2
386            - graphviz <unfixed> (embed)
387            NOTE: lib/gd seems to be 2.0.33
388            - wml <unfixed> (embed)
389            NOTE: derived from gd 1.6.3
390    
391    rar
392            - unrar-nonfree <unfixed> (embed)
393    
394    unrar-free (maybe this code is derived from the original rar, too?)
395            - clamav <unfixed> (embed)
396            NOTE: seems to be disabled in default config
397    
398    mplayer (DirectMedia Object loader)
399            - xine-lib <unfixed> (embed)
400            NOTE: src/libw32dll/
401            - vlc <unfixed> (embed)
402            NOTE: modules/codec/dmo/
403            - mplayer 1.0~rc2-20 (embed)
404    
405    libwpd (WordPerfect converter)
406            - openoffice.org <unfixed> (embed)
407    
408    fsplib (http://sourceforge.net/projects/fsp/)
409            - gftp <unfixed> (embed)
410            NOTE: lib/fsplib version 0.3
411    
412    sprng
413            - tree-puzzle <unfixed> (embed)
414    
415    librpcsecgss
416            - krb5 <unfixed> (embed)
417    
418    jasper
419            - ghostscript <unfixed> (embed)
420            - gs-gpl <unfixed> (embed)
421    
422    libiris
423            - psi <unfixed> (embed)
424            - kdenetwork <unfixed> (embed)
425            NOTE: kopete embeds libiris but links dynamically to libidn
426            - kdegames <unfixed> (embed)
427            NOTE: ksirk/kde4
428    
429    libidn
430            - monotone <unfixed> (embed)
431            - psi <unfixed> (embed)
432            NOTE: psi embeds libiris which embeds libidn
433            - kdegames <unfixed> (embed)
434            NOTE: kdegames/kde4 embeds libiris which embeds libidn
435    
436    liblua
437            - monotone <unfixed> (embed)
438    
439    libbotan
440            - montone <unfixed> (embed)
441    
442    NetXX
443            - monotone <unfixed> (embed)
444    
445    libgc
446            - mono <unfixed> (embed)
447    
448    lzma
449            - p7zip <unfixed> (embed)
450    
451    lzo
452            - grub2 <unfixed> (embed)
453    
454    yassl
455            - mysql-dfsg-5.0 <unfixed> (embed)
456    
457    pax code
458            - tar <unfixed> (embed)
459            - cpio <unfixed> (embed)
460    
461    t1lib
462            - tetex-bin 2.0.2-1 (embed)
463            - texlive-bin <unknown> (embed)
464    
465    guichan
466            - boswars <unfixed> (embed)
467            NOTE: maintainer notified us, working on it
468    
469    tolua
470            - boswars <unfixed> (embed)
471            NOTE: maintainer notified us, working on it
472    
473    asio-dev
474            - luxrender <unfixed> (embed)
475            NOTE: maintainer notified us, working on it
476            NOTE: may be merged with boost "soon"
477    
478  liblua:  xine-lib
479  monotone          - vlc <unfixed> (embed)
480            NOTE: only parts included in modules/access/rtsp
481    
482  libbotan:  netpbm
483  montone          - tcl8.3 <unfixed> (embed)
484            - tcl8.4 <unfixed> (embed)
485            - tcl8.5 <unfixed> (embed)
486            NOTE: generic/tkImgGIF.c
487    
488    tk8.5
489            - tk8.0 <removed> (old-version)
490            - tk8.3 <unfixed> (old-version)
491            - tk8.4 <unfixed> (old-version)
492            - perl-tk <unfixable> (fork)
493    
494    samba
495            - mc 2:4.6.2~git20080311-1 (embed)
496            NOTE: maintainer is aware of this, currently searching a solution
497    
498    plib1.8.4c2
499            - boson <unfixed> (fork)
500            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
501    
502    fribidi
503            - quesoglc <unfixed> (embed)
504            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
505    
506    glew
507            - quesoglc <unfixed> (embed; bug #489341)
508            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
509    
510    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
511            - transcend <unfixed> (embed)
512            - cultivation <unfixed> (embed)
513            - passage <unfixed> (embed)
514            - gravitation <unfixed> (embed)
515    
516  NetXX:  tar
517  monotone          - libarchive <unfixed> (embed)
518            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
519    
520  libgc:  cpio
521  mono          - libarchive <unfixed> (embed)
522            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
523    
524  lzma:  webkit
525  p7zip          - qt4-x11 <unfixed> (embed)
526    
527  lzo:  ftgl
528  grub2          - blender 2.46+dfsg-1 (embed)
529    
530  pax code:  wv
531  tar          - abiword <unfixed>
532  cpio  
533    qemu
534            - kvm <unfixed> (embed)
535            - xen-3 <unfixed> (embed)
536            - xen-unstable <unfixed> (embed)
537    
538    bochs
539            - kvm <unfixed> (embed; bug #489442)
540    
541    speex
542            - vorbis-tools <unfixed> (embed)
543            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
544            - gst-plugins-good0.10 <unfixed> (embed)
545            - xine-lib <unfixed> (embed)
546            - libfishsound <unfixed> (embed)
547            - libannodex <unfixed> (embed)
548            - vlc <unfixed> (embed)
549            - xmms-speex <unfixed> (embed)
550            - libsdl-sound1.2 <unfixed> (embed)
551            - sweep <unfixed> (embed)
552    
553    libreadline
554            - magic <unfixed> (old-version)
555            NOTE: magic is currently an RFS
556    
557    opcode
558            - ode <unfixed> (embed)
559            NOTE: opcode is not a package in debian, it is just embedded
560            NOTE: http://www.codercorner.com/Opcode.htm
561    
562    gimpact
563            - ode <unfixed> (embed)
564            NOTE: gimpact is not a package in debian, it is just embedded
565            NOTE: http://gimpact.sf.net
566    
567    mochikit
568            - mahara <unfixed> (embed)
569            NOTE: they require extra patches, still unmerged upstream
570            - ntop <unfixed> (embed)
571            - python-oherence <unfixed> (embed)
572            - python-paste <unfixed> (embed)
573            - python-turbogears <unfixed> (embed)
574            - zope-plone3 <unfixed> (embed)
575    
576    prototype
577            - netbeans-ide <unfixed> (embed)
578            - auth2db-frontend <unfixed> (embed)
579            - citadel-webcit <unfixed> (embed)
580            - asterisk <unfixed> (embed)
581            - doc-iana <unfixed> (embed)
582            - libaws-doc <unfixed> (embed)
583            - libgettext-ruby-data <unfixed> (embed)
584            - libjson-ruby-doc <unfixed> (embed)
585            - liblucene2-java-doc <unfixed> (embed)
586            - libopenid-ruby <unfixed> (embed)
587            - solr-common <unfixed> (embed)
588            - glpi <unfixed> (embed)
589            - hobbix <unfixed> (embed)
590            - mnemo2 <unfixed> (embed)
591            - nag2 <unfixed> (embed)
592            - knowledgeroot <unfixed> (embed)
593            - mediatomb-common <unfixed> (embed)
594            - mt-daapd <unfixed> (embed)
595            - op-panel <unfixed> (embed)
596            - ebug-http <unfixed> (embed)
597            - phpgedview <removed> (embed)
598            - poker-web <unfixed> (embed)
599            - python-webhelpers <unfixed> (embed)
600            - qwik <unfixed> (embed)
601            - rails <unfixed> (embed)
602            - typo3-src-4.1 <unfixed> (embed)
603            - wordpress <unfixed> (embed)
604            - zope-plone3 <unfixed> (embed)
605            - smokeping <unfixed> (embed)
606            - ampache 3.4.1-2 (embed)
607            - exaile <unfixed> (embed)
608            - hobix <unfixed> (embed)
609            - pixelpost <unfixed> (embed)
610            - symfony <unfixed> (embed)
611            NOTE: it's been said that there are custom changes
612            - zabbix-frontend-php <unfixed> (embed)
613            - turba2 <unfixed> (embed)
614    
615    gdb
616            - insight <unfixed> (embed)
617    
618    e2fsprogs
619            - ldiskfsprogs <unfixable> (fork)
620    
621    quazip (not packaged in Debian)
622            - qcake <unfixed> (embed)
623            NOTE: starting with upstream version 0.6.4
624    
625    exo
626            - pcmanfm <unfixed> (embed; bug #499677)
627            NOTE: slightly modified source code
628    
629    java
630            - openjdk-6 <unfixed>
631            - sun-java5 <unfixed>
632            - sun-java6 <unfixed>
633    
634    libphp-snoopy
635            - ampache 3.4.1-2 (embed; bug #504169)
636            - mahara 1.0.5-2 (embed; bug #504170)
637            - pixelpost <unfixed> (embed; bug #504171)
638            - mediamate 0.9.3.6-5 (embed; bug #504172)
639            - opendb <unfixed> (embed; bug #504173)
640            - wordpress 2.5.1-9 (embed; bug #443948)
641            - moodle <unfixed> (embed; bug #507185)
642            - phpgroupware-felamimail <unfixed> (embed)
643            NOTE: phpgroupware-felamimail is only in etch
644            - magpierss 0.72-3 (embed; bug #431089)
645    
646    jquery
647            - zekr <unfixed> (embed)
648            - wordpress <unfixed> (embed)
649            - yocto-reader <unfixed> (embed)
650            - textpattern <unfixed> (embed)
651            - genshi 0.5.1-1 (embed)
652            NOTE: compressed file under examples/ dir
653            - prewikka <unfixed> (embed)
654            - libramaze-ruby <unfixed> (embed)
655            - drupal5 <unfixed> (embed)
656            - b2evolution <unfixed> (embed)
657            - wesnoth <unfixed> (embed)
658    
659    tablesorter (jquery plugin, not packaged yet)
660            - wesnoth <unfixed> (embed)
661    
662    kses
663            - wordpress <unfixed> (embed; bug #504242)
664            NOTE: their copy has all methods renamed to wp_<foo>
665            - moodle <unfixed> (embed; bug #507185)
666            - egroupware <unfixed> (embed)
667    
668    magpierss
669            - wordpress <unfixed> (embed; bug #504242)
670            - moodle <unfixed>
671    
672    php-gettext
673            - wordpress <unfixed> (embed; bug #504242)
674    
675    libphp-ixr (name may change, it is the Incutio XML-RPC)
676            - wordpress <unfixed> (embed; bug #504242)
677            - dokuwiki <unfixed> (embed)
678            - textpattern <unfixed> (embed)
679    
680    libphp-cas
681            - glpi <unfixed> (embed)
682            - moodle <unfixed> (embed; bug #496069)
683    
684    scriptaculous
685            - glpi <unfixed> (embed)
686            - libaws-doc <unfixed> (embed)
687            - op-panel <unfixed> (embed)
688            - symfony <unfixed> (embed)
689            NOTE: maintainer says there are extra incompatible changes required
690            - pixelpost <unfixed> (embed)
691            - python-webhelpers <unfixed> (embed)
692            - qwik <unfixed> (embed)
693            - smokeping <unfixed> (embed)
694            - turba2 <unfixed> (embed)
695            - typo3-src 4.2.3-1 (embed)
696    
697    libmarkdown-php
698            - moodle <unfixed> (embed; bug #507185)
699            - pixelpost <unfixed> (embed)
700    
701    php-openid
702            - wordpress-openid <itp> (embed)
703    
704    geshi
705            - dokuwiki 0.0.20080505-3.1 (embed)
706            - pgfouine 1.0-1.1 (embed)
707            - websvn 2.1.0-1 (embed)
708    
709    webcalendar
710            - gforge-plugins-extra 4.7~rc2-6 (embed; bug #504758)
711    
712    libical
713            - kdepim <unfixed> (fork)
714            - kdepimlibs <unfixed> (fork)
715            NOTE: fixed in KDE4 post 4.1.x series
716    
717    libltdl3
718            - kdelibs <unfixed> (embed)
719            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
720            - synfig <unfixed> (embed)
721    
722    harfbuzz
723            - qt4-x11 <unfixed> (embed)
724    
725    libzip
726            - php5 <unfixed> (fork)
727    
728    json.php (not packaged; should be replaced with php's built-in functions)
729            - moodle <unfixed>
730            - yui <unfixed>
731            - gallery2 <unfixed>
732            - dokuwiki <unfixed>
733            - typo3-src-4.2 <unfixed>
734    
735    php-fpdf
736            - tcpdf <itp> (fork)
737            - moodle <unfixed>
738            - phpwiki <unfixed>
739            - egroupware <unfixed>
740            - ldap-account-manager <unfixed> (fork)
741    
742    tcpdf (itp: #495985)
743            - moodle <unfixed>
744            - phpmyadmin <unfixed>
745    
746  t1lib:  typo3
747  tetex-bin (links to system t1lib since 2.0.2)          - moodle <unfixed>
 texlive-bin (links to system t1lib)  
748    
749    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
750            - moodle <unfixed>
751            - gosa <unfixed>
752    
753    php-ole (itp: #487558)
754            - moodle <unfixed>
755    
756    pieforms (http://www.catalyst.net.nz)
757            - mahara <unfixed>
758    
759    savant2 (http://phpsavant.com)
760            - egroupware <unfixed>
761    
762    rssparser (http://nwow.org)
763            - egroupware <unfixed>
764            - phpgroupware <unfixed>
765    
766    lcms
767            - openjdk-6 <unfixed> (fork)
768    
769    libphp-phplayersmenu
770            - diogenes <unfixed>
771            - phpldapadmin <unfixed>
772    
773    libphp-pclzip
774            - docvert <unfixed>
775            - moodle <unfixed>
776            - egroupware <unfixed>
777    
778    libphp-simplepie
779            - dokuwiki <unfixed>
780    
781    libphp-jpgraph
782            - egroupware <unfixed>
783    
784    php-simpletest
785            - moodle <unfixed>
786    
787    libpng
788            - iceweasel <unfixed> (embed)
789            NOTE: 3.0 uses embedded copy, 2.0 uses system libpng
790            - icedove: 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
791            - iceape 1.0.13~pre080614i-0etch1 (embed)
792            - xulrunner <unfixed> (embed)
793            NOTE: Debian 1.9.0.6 uses embedded copy
794            NOTE: Ubuntu: 1.9.x use embedded copy, 1.8 and 1.8.1 use system libpng
795            - firefox 1.5.dfsg+1.5.0.3-0ubuntu3, 2.0.0.6+2nobinonly-0ubuntu1 (embed)
796            NOTE: Ubuntu only
797            - firefox-3.0 <unfixed> (embed)
798            NOTE: Ubuntu only
799            - firefox-3.1 <unfixed> (embed)
800            NOTE: Ubuntu only
801            - seamonkey 1.1.9+nobinonly-0ubuntu1 (embed)
802            NOTE: Ubuntu only
803            - thunderbird 2.0.0.6+nobinonly-0ubuntu1 (embed)
804            NOTE: Ubuntu only
805            - mozilla-thunderbird 1.5.0.2-0ubuntu2 (embed)
806            NOTE: Ubuntu only
807    
808    irssi
809            - irssi-plugin-silc <unfixed> (embed)
810            NOTE: Seems to be a pre-0.8.12 version that is used
811    
812    extc
813            - mtasc <unfixed> (embed)
814            - haxe <unfixed> (embed)
815    
816    swflib
817            - mtasc <unfixed> (embed)
818            - haxe <unfixed> (embed)

Legend:
Removed from v.7695  
changed lines
  Added in v.11552

  ViewVC Help
Powered by ViewVC 1.1.5